Startup left production AWS keys public for 5 months; their VDP was silent (opens in new tab)

(benzimmermann.dev)

4 pointsTerretta2d ago2 comments

2 comments

They're prolly vibe coders.

> The company displays SOC 2 and ISO 27001:2022 certifications on its website, claims least-privilege IAM practices, conducts regular third-party penetration testing, and offers its own AWS misconfiguration scanner called Pump Secure.

Delve customers?

j / k navigate · click thread line to collapse

2 comments

thedelanyo2d ago

They're prolly vibe coders.

CodingJeebus2d ago

Delve customers?

j / k navigate · click thread line to collapse